Mshta Executing Remote HTA File from Command Prompt
Detects the execution of a remote HTA file using mshta.exe, where the parent process is cmd.exe. This is a common technique for code execution via malicious HTA files.
Sigma
Detects the execution of a remote HTA file using mshta.exe, where the parent process is cmd.exe. This is a common technique for code execution via malicious HTA files.
Already have an account?